| Package | Affected versions | Patched versions |
|---|---|---|
| phplist | = 2.10.1= 2.10.10= 2.10.11= 2.10.12= 2.10.13= 2.10.14= 2.10.15= 2.10.16= 2.10.2= 2.10.3= 2.10.4= 2.10.5= 2.10.7= 2.10.8= 2.10.9≤ 2.10.17 |
SQL injection vulnerability in public_html/lists/admin in phpList before 2.10.18 allows remote attackers to execute arbitrary SQL commands via the sortby parameter in a find action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free